add private cookie for the authorizate user